not zsh .. plugging my bash script [1] (and gnome task bar UI) - to start a gnome terminal with a different named history file. [1]: https://github.com/appsmatics/gtsh-hist
I have a FW13, 3 yrs old, battery was getting weak, i just ordered one from FW and popped out the old one and put in a new one. Same for SSD and memory. This alone makes me stay with FW.
Are many of the packages obfuscated? Seems like here the server url was heavily obfuscated and encrypted, that is a big warning flag is it not. Auto scanning a submitted package and flagging off obfuscated / binary payloads / install scripts for further inspection could help. Am wondering how such packages get automatically promoted for distribution ..
pardon the naive question. What i don't get is these injected payload are js files, isn't there some scanning at npm upload level to look for exfiltration behaviour, bash executions of dangerous commands like rm or shred ?